Agency Information Security Professional 1 (Cyber)

State of Ohio; Kentucky; On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Free Parking

Free Onsite Gym and Walking Path

Daycare On-site

Cafeteria On-site

Job summary

Ohio Department of Public Safety is seeking an Agency Information Security Professional 1 to safeguard state assets. Responsibilities include monitoring security tools, conducting secure code reviews, and participating in threat analysis and remediation efforts.

The role requires hands-on experience in cybersecurity, vulnerability management, and incident response, with on-site work at state facilities and opportunities for professional training and advancement.

Qualifications

• Experience in monitoring system/network traffic for anomalous activity or data security.
• Knowledge of secure coding practices and SDLC integration.
• Ability to perform vulnerability scans and analysis using enterprise tools.
• Familiarity with incident triage and cyber threat analysis.

Responsibilities

• Configure, support & monitor enterprise security tools to safeguard State assets.
• Deliver secure code review assessments for C#, .NET, and SQL; identify vulnerabilities.
• Contribute to secure coding training and remediation materials.
• Perform daily monitoring and triage of security alerts; escalate as needed.
• Participate in penetration tests and document results.

Skills

Cybersecurity

Vulnerability management

Threat monitoring

Secure coding

Tools

Qualys

Checkmarx

Job description

Report in location: 1970 West Broad Street, Columbus, Ohio 43223

Perks of Working for the Ohio Department of Public Safety

• Multiple pay increases over your first years of service!
• Free Parking!
• Free Onsite Gym and Walking Path!
• Daycare On-site!
• Cafeteria On-site!

What you'll do as an Agency Information Security Professional 1:

• Configure, support & monitor enterprise security tools to safeguard State assets against malicious activity, characterize & monitor network traffic to identify anomalous activity & potential threats to network resources & analyze identified malicious activity to determine weaknesses exploited, exploitation methods & effects on system & information.
• Deliver secure code review assessments of object-oriented programming languages such as C# in the .NET Framework, & SQL; Analyze & identify security vulnerabilities in source code using both automated & manual tools & techniques (e.g., Checkmarx).
• Contribute to development & delivery of secure coding & remediation training materials; Recommend best practices to integrate & automate application security testing as part of the system development life cycle (SDLC).
• Employ industry best practices, processes, procedures, & techniques as part of daily monitoring & analysis of potential cyber security events; Triage SOG alerts in a timely fashion remediate level 1 & level 2 alerts & elevate alerts when necessary.
• Participate in penetration tests; Perform vulnerability scans using department tools (e.g., Qualys); Present Monitoring/Test Results & Reports as required.

Qualifications and Experience

• Option 1: 36 mos. exp. in computer data security either through monitoring system/network traffic for anomalous activity, systems development or controlling accessibility of data.
• -Or completion of associate core program in computer science AND 18 mos. trg. or 18 mos. exp. in computer data security either through monitoring system/network traffic for anomalous activity, systems development or controlling accessibility of data.
• -Or completion of undergraduate core program in computer science AND 12 mos. trg. or 12 mos. exp. in computer data security either through monitoring system/network traffic for anomalous activity, systems development or controlling accessibility of data.
• -Or 12 mos. exp. as Information Technology Apprentice, 69910; successful completion of Ohio Cyber Apprenticeship program; additional 12 mos. trg. or exp. in Information Systems/Information Technology with a focus in one of the following areas: Software Engineering/Development, Data Analytics/Business Intelligence, Database Administration, Network, or IT Security. -Or equivalent of Minimum Class Qualifications for Employment noted above.
• Note: The Ohio Cyber Apprenticeship program is a program offered by the Department Administrative Services. 2000 hrs. of on-the-job experience and 200 certified instructional credits must be earned in order to complete this program.

Job Skills

Cybersecurity